ASP.NET

Dim id As Integer = Request.QueryString("ui")
        Panel2.Visible = True
        Panel4.Visible = True
        Dim cmd2 As String = ("Select Specification from DefineSpecification where CategoryID=" + id.ToString())
        Dim rdr2 As IDataReader = db.ExecuteReader(CommandType.Text, cmd2)
        Dim conn As New SqlConnection
        Dim cmd As New SqlCommand("Select Count(*) from DefineSpecification Where CategoryID=" + id.ToString(), conn)
        conn.ConnectionString = ConfigurationManager.ConnectionStrings("See2Buy").ConnectionString
        conn.Open()
        Dim count As Int32 = Convert.ToInt32(cmd.ExecuteScalar())
        While rdr2.Read
            Dim lbl = New Label()
            lbl.Text = rdr2.Item("Specification")
            Dim cmd3 As String = "Insert into Specification(ProductName,SpecificationHeading)Values('" + txtProductName.Text + "','" + lbl.Text + "')"
            Dim dbcmd1 As DbCommand = db.GetSqlStringCommand(cmd3)
            db.ExecuteNonQuery(dbcmd1)
            For i As Integer = 0 To count
                Dim txtCtrl As TextBox = DirectCast(Panel4.FindControl("txt" & (i + 1)), TextBox)
                If txtCtrl IsNot Nothing Then
                    TextBox1.Text = txtCtrl.Text
                    Dim cmd4 As String = "Update Specification set SpecificationDescription='" + TextBox1.Text + "' where ProductName='" + txtProductName.Text + "' AND SpecificationHeading='" + lbl.Text + "'"
                    Dim dbcmd As DbCommand = db.GetSqlStringCommand(cmd4)
                    db.ExecuteNonQuery(dbcmd)
                End If
            Next
        End While